summaryrefslogtreecommitdiffstats
path: root/.htaccess
diff options
context:
space:
mode:
authorRobert Jäckel <rjaeckel@users.noreply.github.com>2014-11-27 17:14:27 +0100
committerRobert Jäckel <rjaeckel@users.noreply.github.com>2014-11-27 17:14:27 +0100
commit8c3bf139ffe9f35e4d631827fe659b13cebca388 (patch)
tree93ac8b31b3ca0d1acb1ba0b9ae42616f6d57e13e /.htaccess
parenta2172786a8cbdcac58906df03713f21a98694119 (diff)
downloadnextcloud-server-8c3bf139ffe9f35e4d631827fe659b13cebca388.tar.gz
nextcloud-server-8c3bf139ffe9f35e4d631827fe659b13cebca388.zip
restrict access to public files only
use mod_rewrite to pretend theese files are not existend for security purposes
Diffstat (limited to '.htaccess')
-rw-r--r--.htaccess2
1 files changed, 2 insertions, 0 deletions
diff --git a/.htaccess b/.htaccess
index e45810d0a05..3d06753e9eb 100644
--- a/.htaccess
+++ b/.htaccess
@@ -25,6 +25,8 @@ RewriteRule ^\.well-known/caldav /remote.php/caldav/ [R]
RewriteRule ^apps/calendar/caldav\.php remote.php/caldav/ [QSA,L]
RewriteRule ^apps/contacts/carddav\.php remote.php/carddav/ [QSA,L]
RewriteRule ^remote/(.*) remote.php [QSA,L]
+RewriteRule ^(build|tests|config|lib|l10n|templates)/.* - [R=404,L]
+RewriteRule ^(\.|autotest|occ|issue|indie|db_|console).* - [R=404,L]
</IfModule>
<IfModule mod_mime.c>
AddType image/svg+xml svg svgz